Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/645bb2-fc34-429b-a7f0-cf03fa4ca083/1/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.mft
File:                     iKjTJfl7A3EzQmgvxAjVM2h0Dn0.mft (raw, json)
Hash identifier:          iTB+5uSyyD22QUmODGy54XJa4A/buJXP0KtcMRTqAbI=
Subject key identifier:   52:46:37:1E:58:ED:BB:80:25:AB:79:92:9E:EE:E1:C0:91:BC:D2:32
Authority key identifier: 88:A8:D3:25:F9:7B:03:71:33:42:68:2F:C4:08:D5:33:68:74:0E:7D
Certificate issuer:       /CN=88a8d325f97b03713342682fc408d53368740e7d
Certificate serial:       01962ECF7032BDABBDA5657CDBDD763C1714
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/645bb2-fc34-429b-a7f0-cf03fa4ca083/1/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.mft
Manifest number:          0F77
Signing time:             Sun 13 Apr 2025 11:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:08 +0000
Files and hashes:         1: 1g597y06foQbOFcS_h93SwkhNOQ.roa (hash: TZdC67NT8fkd1drCN7n7TEHOt/q1UG1cqUfoMBev2T4=)
                          2: iKjTJfl7A3EzQmgvxAjVM2h0Dn0.crl (hash: tS1sVfQprl+tLlgaJp4ITt28+R1fa6wKQLQFaxZfDB8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:70:32:bd:ab:bd:a5:65:7c:db:dd:76:3c:17:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88a8d325f97b03713342682fc408d53368740e7d
        Validity
            Not Before: Apr 13 11:01:08 2025 GMT
            Not After : Apr 14 11:01:08 2025 GMT
        Subject: CN=5246371e58edbb8025ab79929eeee1c091bcd232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:76:f8:90:1f:77:ac:94:74:3f:dd:22:df:f1:
                    25:ba:17:ea:94:e8:ed:a3:b4:51:13:10:c7:d8:bf:
                    fe:d4:ad:c2:b1:18:84:bd:12:70:74:cf:2b:98:c4:
                    b8:1b:ff:02:21:df:76:4a:8f:03:70:ed:7c:be:9b:
                    ea:a9:58:07:03:ad:ad:32:b5:17:cc:13:bd:cc:a0:
                    de:99:9e:9b:29:aa:a7:ae:e8:b0:c5:90:51:03:b9:
                    17:e8:24:fd:c5:18:54:09:47:9e:71:7e:b8:b6:1b:
                    12:57:02:8e:8d:57:6d:02:3c:a9:cd:fb:d6:e2:53:
                    9e:98:65:92:c1:c3:04:4f:ac:f4:2e:2b:36:35:38:
                    bc:6a:8a:67:93:51:92:2f:0e:ed:96:b6:2e:c6:7f:
                    a6:60:da:08:af:87:11:8c:3b:e5:a9:33:80:1b:9a:
                    19:fc:cf:7a:82:a9:0b:6e:f7:3d:9b:14:56:2e:59:
                    7b:4b:ae:69:ec:cf:47:a2:b3:f3:b8:0a:21:76:68:
                    36:3b:00:50:a4:e1:03:30:4d:0a:ec:35:f1:fe:c2:
                    e8:9a:dc:0c:5b:24:0c:b6:6e:6e:97:77:2c:18:6d:
                    44:29:0c:96:3f:ce:f8:3b:1f:90:56:8e:3a:e6:0e:
                    7b:5f:42:d9:9b:48:c2:a5:5d:98:66:02:5e:4e:20:
                    0c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:46:37:1E:58:ED:BB:80:25:AB:79:92:9E:EE:E1:C0:91:BC:D2:32
            X509v3 Authority Key Identifier:
                keyid:88:A8:D3:25:F9:7B:03:71:33:42:68:2F:C4:08:D5:33:68:74:0E:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/645bb2-fc34-429b-a7f0-cf03fa4ca083/1/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/645bb2-fc34-429b-a7f0-cf03fa4ca083/1/iKjTJfl7A3EzQmgvxAjVM2h0Dn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:bb:4e:98:ce:84:0f:37:9f:41:5f:b6:5e:63:ad:75:27:66:
         1f:b5:5e:54:4a:fd:11:0c:5f:a1:75:1e:08:16:ae:e0:b3:96:
         62:7b:59:b4:84:fd:c4:30:c6:16:e0:b2:c9:2a:be:a9:ed:51:
         97:c1:87:0c:24:6c:68:b2:95:70:fb:2b:80:96:c1:b1:71:29:
         36:cc:de:fc:9b:89:1e:5c:7d:0b:52:3e:43:d9:57:36:d1:7f:
         e2:4f:d1:31:80:36:fc:f8:c8:08:9a:00:01:3e:40:7b:07:5b:
         29:0b:3f:f6:87:a2:b2:ed:7d:26:3f:8e:17:e6:a8:83:e6:36:
         01:dc:bb:77:78:48:e0:5c:50:41:ef:81:42:af:74:28:e3:6f:
         06:e4:fd:89:36:6f:46:3f:6a:21:35:08:4c:e0:03:2e:07:bd:
         bb:24:f6:e1:95:72:5e:53:9e:13:ce:4d:65:e8:3d:2e:f7:cb:
         88:f7:f5:a0:b7:d8:58:9f:58:13:fb:22:8b:4a:1c:8a:a9:05:
         1c:bf:ca:61:0e:09:0a:4c:c6:fd:a3:c2:3f:77:b1:f2:d3:d5:
         81:3c:fb:b2:e6:f5:0e:91:c6:3b:14:08:f2:6c:02:b5:45:1d:
         89:d7:b1:a1:31:81:65:9b:50:a0:a2:36:64:6f:3d:62:02:91:
         65:cf:c8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----